Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/25fb54-d467-4e90-a41f-91c0d8e7549d/1/N6TS5C8jYsLm71K4Lxn35WN1fgw.mft
File:                     N6TS5C8jYsLm71K4Lxn35WN1fgw.mft (raw, json)
Hash identifier:          4HtSAEYIdsyjDC93zv0GTaeInvt7RlWoqDMEdW8J/os=
Subject key identifier:   33:0C:45:CF:7B:AF:0C:6F:DB:17:FA:39:20:BE:56:03:12:52:98:AF
Authority key identifier: 37:A4:D2:E4:2F:23:62:C2:E6:EF:52:B8:2F:19:F7:E5:63:75:7E:0C
Certificate issuer:       /CN=37a4d2e42f2362c2e6ef52b82f19f7e563757e0c
Certificate serial:       01962E61CA352DA4BE2C4BA41B607BBECBA6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/N6TS5C8jYsLm71K4Lxn35WN1fgw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/25fb54-d467-4e90-a41f-91c0d8e7549d/1/N6TS5C8jYsLm71K4Lxn35WN1fgw.mft
Manifest number:          0215
Signing time:             Sun 13 Apr 2025 09:01:22 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:22 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:22 +0000
Files and hashes:         1: 3PpgKNG0AmRV_aCWCsXZ_tB5eIg.roa (hash: eRzqoJ+wnFE50kPBIiEdOOr71bv/+CxmFvCCuPDTNi4=)
                          2: N6TS5C8jYsLm71K4Lxn35WN1fgw.crl (hash: uxttDDNWDXz7GiYbPL9AMpLtnnZsHd/vdCVHM6GhiKo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:ca:35:2d:a4:be:2c:4b:a4:1b:60:7b:be:cb:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37a4d2e42f2362c2e6ef52b82f19f7e563757e0c
        Validity
            Not Before: Apr 13 09:01:22 2025 GMT
            Not After : Apr 14 09:01:22 2025 GMT
        Subject: CN=330c45cf7baf0c6fdb17fa3920be5603125298af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:c5:9f:0e:be:00:a7:f8:d0:47:12:b7:b7:16:
                    a2:7c:fd:1a:bf:18:a3:02:0a:c2:9b:ee:f3:5e:37:
                    54:ab:0e:4e:15:9b:0a:49:f4:c1:c6:bd:ff:bc:72:
                    83:f1:e4:c3:9c:33:22:43:fb:20:a1:65:23:12:8e:
                    6e:eb:78:4e:d2:1c:aa:ac:ba:cf:cc:01:77:12:96:
                    be:74:68:75:ff:ea:e7:a1:89:e7:23:82:c0:4b:2e:
                    bb:e0:fc:d1:55:53:2b:a8:ad:9b:c2:b1:d1:ba:66:
                    d9:f9:42:4b:6f:cf:2d:a4:db:0a:10:4b:d9:ba:a0:
                    e2:3f:ed:dd:2e:98:84:d3:c2:8f:08:dd:ea:02:d7:
                    ab:d8:3e:2a:96:66:47:db:5b:19:55:52:95:25:a7:
                    c9:98:01:d5:44:fc:cf:9d:4c:eb:b1:e5:b1:92:35:
                    d7:d6:23:d7:fa:1c:98:22:64:54:bb:1d:cf:d7:47:
                    83:70:b8:48:8b:ce:ea:7a:91:46:5e:67:37:95:97:
                    9d:ee:a3:1b:65:fd:73:02:d9:ed:24:47:6a:18:53:
                    09:1c:6d:7a:28:51:8a:1b:ee:ac:3d:a4:2e:72:32:
                    e4:f1:06:5e:19:52:98:6f:13:dc:c3:06:85:bb:31:
                    f4:9c:cb:df:97:2c:41:3f:42:57:3a:b3:70:26:74:
                    73:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:0C:45:CF:7B:AF:0C:6F:DB:17:FA:39:20:BE:56:03:12:52:98:AF
            X509v3 Authority Key Identifier:
                keyid:37:A4:D2:E4:2F:23:62:C2:E6:EF:52:B8:2F:19:F7:E5:63:75:7E:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N6TS5C8jYsLm71K4Lxn35WN1fgw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/25fb54-d467-4e90-a41f-91c0d8e7549d/1/N6TS5C8jYsLm71K4Lxn35WN1fgw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/25fb54-d467-4e90-a41f-91c0d8e7549d/1/N6TS5C8jYsLm71K4Lxn35WN1fgw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:4b:dc:ea:9a:dd:ac:31:b9:b3:b4:8d:e9:14:5a:04:6b:e9:
         46:98:0c:e7:8e:41:fe:95:c5:c4:2d:ec:8a:a6:db:c8:e7:55:
         b9:98:d0:28:00:8b:06:38:17:cc:d4:ad:68:c5:71:c1:88:ee:
         01:32:6c:74:47:c0:cd:8a:27:64:3d:01:52:fe:57:a5:c4:fe:
         81:96:37:a3:0d:8d:3d:c9:6d:e8:e0:f2:67:9c:e3:33:f8:2c:
         fe:44:30:c4:9a:2d:0a:09:f6:b9:48:72:13:eb:38:67:8b:55:
         da:47:15:31:b2:55:9a:0e:2d:c7:2d:e1:82:fb:53:fd:92:43:
         74:ad:5a:fe:07:86:de:ec:fd:76:ee:7d:69:6f:3d:e6:9a:c6:
         1e:fe:a5:44:04:cf:f6:5f:a0:e4:ec:b0:4d:1d:fd:f2:f8:7b:
         83:15:5a:bc:54:e8:43:3a:d6:06:0a:5a:45:3e:63:12:7b:32:
         c7:da:3b:98:7f:c6:42:1d:91:e9:f9:e1:1d:ff:86:56:71:6c:
         bb:d0:65:f6:e1:e1:00:00:84:67:63:07:81:a6:c4:0d:be:ec:
         31:53:9d:26:e3:ad:40:1b:2c:ba:d0:f8:b9:a4:bc:66:65:e0:
         d7:b7:6b:ba:b8:52:10:ab:81:b3:f3:8d:22:93:71:8e:c8:c7:
         b8:bf:50:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----